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DETAILED ACTION 

1 . This action is responsive to the Board decision rendered 3/1/2006. The Board 
essentially agreed with the examiner on all points of the rejection except where official 
notice was taken regarding obvious distribution of a key in a symmetric key encryption 
scheme. The examiner relied upon such official notice and provided (in the final 
rejection of 12/10/03) evidence supporting the official notice (William Stallings et al, 
"Business Data Communications," 1994, Prentice Hall, second edition, pgs 601-602). 
The final rejection was subsequently appealed to the Board, yet the Board considered 
that the Stallings et al evidence was "not part of the rejection on appeal." In order to 
clarify that the rejection is based upon this Stallings et al reference, the examiner is 
herein re-stating the previous rejection as "unpatentable over Behr et al (US61 07944) in 
view of Hornbuckle (WO 90/13865), Ahrens et al (US5951620) and Stallings et al 
(William Stallings et al, "Business Data Communications," 1994, Prentice Hall, second 
edition). The examiner is also providing a short discussion of Stallings et al in order to 
more clearly set forth the basis for the obviousness rejection. 

Claim Rejections - 35 USC § 103 

2. The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 
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3. Claims 25-30 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Behr et al (US61 07944) in view of Hornbuckle (WO 90/13865), Ahrens et al 
(US5951620) and Stallings et al (William Stallings et al, "Business Data 
Communications," 1994, Prentice Hall, second edition). Behr et al teaches a 
method for providing software updates to mobile/remote GPS units. The remote GPS 
unit requests data (via user interface display/keyboard 24, 28, 30, 46, 60 - fig 1) from a 
base unit and the most recent maps/navigation data are transmitted to the remote unit. 
"The amount of information available at the remote unit can be increased by providing 
the remote unit with information from the base unit which is not adequately covered by 
any databases on-board the remote unit" [see abstract]. Behr et al, like applicant, 
recognizes the same limitations of prior art systems in which GPS/navigation units that 
require updates of more recent navigation/map data have to rely on distribution of floppy 
disk or CDs col 2 lines 4-24]. The remote units request data from the base unit which 
responds with the requested data. Behr et al's methods include a database of maps 
located at the remote GPS unit [col 21 lines 33-36]; updates to the maps and programs 
can be communicated from the base unit to the remote unit to provide most recent 
versions [col 22 lines 9-12]. The communication protocol includes features for CRC 
error checking, compression, as well as inclusion of unitID and subscriberlD information 
for billing purposes [col 6 lines 40-46, col 1 1 lines 59-65, col 12 lines 57-62, col 14 lines 
1-3, 10-14]. Regarding the "payment authorization information", as broadly interpreted 
this merely requires any type of information that is associated with authorization of 
payment. It is noted that no steps/structure is required by the claims to authorize or 
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process any particular payment; only information that has a mere association to 
payment authorization need be provided. As such, requests for updated navigation 
information are taken to include payment authorization information and/or permission for 
charging payments in that they at least identify a subscriber and are associated with 
billing function(s). Behr et al does not teach encryption however. Hornbuckle teaches 
distribution of software code using encryption techniques so that the software can only 
be used by the intended recipient hardware [pg 21 lines 15-19]. The functionality of the 
software transmitted by Hornbuckle's methods is not the focus of the rejection, but 
rather the motivation for securing the transmitted software. It would have been obvious 
to one of ordinary skill at the time of the invention to have provided such encryption 
techniques with the GPS remote hardware devices of Behr et al so that the data 
transmissions over Behr et al's non-secure facilities (telephone system, RF, etc) were 
secured and that Behr et al's desire for sending software only to paying customers was 
accomplished in a way that prevents unauthorized, non-paying customers from 
accessing such data. Hornbuckle teaches encryption/decryption using an encryption 
key derived from and unique to the individual target devicelD in which the requested 
software is to be used [pg 20 lines 20-23]. Hornbuckle teaches downloading a 
decrypting module/program along with the encrypted requested software. The 
decrypting module decrypts the requested software and loads it into the internal 
memory of the targeted device [pg 19 lines 21-31]. The downloaded software package 
will only run on the particular target device having an encryption key corresponding to 
the encryption key employed by the host when the software was encrypted [pg 21 lines 
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15-19]. This encryption and decryption algorithm which uses the same key is an 
example of symmetric, or single-key encryption. Symmetric encryption requires both 
parties to possess the same key so that the encrypting party can encrypt data using the 
key and send the encrypted data to the decrypting party who can use a copy of the 
same key to decrypt the received encrypted data into useable form. Stallings et al 
describes this single-key encryption concept on page 601 (lines 10-14). Stallings et al 
further describes the required process of "key distribution" in such a single-key scheme 
- how to ensure both parties possess (copies of) the same single key (page 601 - "Key 
Distribution" to page 602). Stallings et al defines two parties A and B who wish to 
exchange (encrypted) data once they both have copies of the same necessary key. 
Stallings et al states in the first option on page 602 that party A could deliver the key to 
party B. Note that these parties (A and B) are purposefully vague as to which party (A 
or B) represents the encrypting sender and which party represents the decrypting 
receiver. Either party can supply the other with the necessary key. Only after both 
parties possess the key can single key encryption succeed. Hornbuckle appears to 
provide an example where the host sends the key to the client. It would have been 
obvious to one of ordinary skill at the time of the invention to have alternatively provided 
the host with a copy of the client key (unique to the user hardware) as part of the initial 
request, so that both parties have copies of the same key, consistent with the symmetric 
(single key) encryption approach. It is a matter of system design choice to choose who 
transmits a copy of the key, so long as both parties use the same key. The requested 
software will have the decrypting program/module appended and the original software 
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will be replaced with the encrypted software [pg 21 lines 27-30]. This appending is 
taken as providing the decrypting program in the footer of the transmission. It would 
have been obvious to one of ordinary skill at the time of the invention to have relied on 
and transmitted the unique GPS unitID taught by Behr et al to the base unit for 
encryption purposes so that the encrypted software can only be decrypted and used by 
the authorized device possessing the same GPS unitID key; likewise, it would have 
been obvious to one of ordinary skill at the time of the invention to have verified the 
presence of the proper unique key in the transmission footer so that decryption can only 
occur properly for the intended recipient device. Ahrens et al teaches a GPS system 
whereby users may pay for subscriptions entitling them to downloaded GPS map 
updates [abstract, col 19 lines 63+]. The user's GPS device is provided media within 
the GPS unit which stores the unitID; this unitID is used for security purposes to ensure 
updates can only be made to the appropriate device. It would have been obvious to 
one of ordinary skill at the time of the invention to have provided such hardware 
identification with that of Behr et al and Hornbuckle as an example of how to carry out 
the required hardware identification taught by Behr et al and Hornbuckle. Ahrens et al 
also points out that his transmitted GPS updating methods can also be used for other 
types of software, including PC software and computer game software. This 
strengthens examiner's argument that one of ordinary skill would be motivated to use 
Hornbuckle's encryption techniques when transmitting software; secure transmission of 
software is critical, regardless of the software's ultimate functionality. 
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Regarding the "navigation data" language, the types of data in the "geographical 
databases" (described as route guidance, streets, airports, restaurants, points of 
interest, etc [col 1 lines 37-62]) of Behr et al can be taken to be navigation data - one 
could navigate by relying on the data in Behr et al's "geographical databases"; 
Navigation can be accomplished by using maps of highways, rivers, buildings, etc. 

Regarding claims 26, 27, it would have been obvious to one of ordinary skill at 
the time of the invention to have employed any well known encryption techniques, 
including CRC encryption using the unique unitID as a seed. Any encryption technique 
could have been used to secure the transmission and such selection of techniques is 
not critical to the invention. 



Response to Argument 

Applicant argues that it is not possible in Hornbuckle to send the key to the host 
from the client. This argument is not understood by the examiner, however examiner 
has supplied teachings from Stallings et al providing support and motivation for the 
proposed key distribution by way of sending Behr et al's unitID as the encryption key to 
the software supplier host. 

Applicant argues that the references do not provide "payment authorization 
information." As stated above, "payment authorization information" as broadly 
interpreted merely requires any type of information that is associated with authorization 
of payment. As such, requests for updated navigation information are taken to 
inherently include payment authorization information and/or permission for charging 
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payments in that they at least identify a subscriber and are associated with billing 
functions. It is further noted that no steps/structure is required by the claims to 
authorize or process any particular payment; only information that has a mere 
association to payment authorization need be provided. Applicant's argument that the 
instant specification (pg 8 lines 3-10) defines the language in question is not convincing. 
There is no explicit definition of "payment authorization information," but rather a 
statement that in fact requiring payments is optional and general disclosure that various 
electronic payment systems can be used to purchase updates if desired. The claim 
language is therefore broadly but reasonably interpreted using the plain and ordinary 
meaning of the language. 

Applicant argues that there is no suggestion to combine Behr et al and 
Hornbuckle because there is no need or desire in Behr et al for encryption/security. 
Applicant admits [spec pg 2] that GPS software providers typically provide software 
updates via mailed floppy disks rather than via the Internet to prevent easily 
unauthorized duplication of such Internet-distributed software. Applicant notes 
problems with floppy disk distributions. Applicant also admits the known problem of an 
authorized update being easily applied to an unauthorized device. Behr et al also notes 
the problems with floppy disk distribution of software/map updates [col 2 lines 4-24]. 
Behr et al teaches that users are subscribers and are billed for services. One of 
ordinary skill would be motivated to protect against such known software pirating in the 
case of Behr et al's subscribing customers purchasing software services. Further, 
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Hornbuckle also supplies reasoning to secure/encrypt software updates so that only 
paying, authorized users can use them. 

Applicant states that because Behr et al's updates are for a single, user-specified 
route, that it is of no value to others. Examiner disagrees with such an opinion. Beyond 
the motivation to secure the purchased data for use only by the authorized/paying user, 
the GPS user may desire privacy for his selected route details/updates. 



Conclusion 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Jeffrey D. Carlson whose telephone number is 571-272- 
6716. The examiner can normally be reached on Mon-Fri 8a-5:30p, (work from home 
on Thursdays). 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Eric Stamber can be reached on (571)272-6724. The fax phone number for 
the organization where this application or proceeding is assigned is 571-273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 




Jeffrey D. Carlson 
Primary Examiner 
Art Unit 3622 
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